$ rpki-client -vvf rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft File: 8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft (raw, json) Hash identifier: w+/b0I742OaiUsuBRnTcJBeJ47JeVeB0GxcCmntefNE= Subject key identifier: 00:7A:BB:8E:D9:41:11:43:E1:19:50:00:9D:86:68:2E:DD:5A:8F:48 Authority key identifier: 8F:04:9B:43:DD:61:28:5C:6C:DC:81:93:87:CA:D0:65:1B:0C:F3:8B Certificate issuer: /CN=8F049B43DD61285C6CDC819387CAD0651B0CF38B Certificate serial: 5CEDBA993A9E09AF49ACCB7CC858178424F247B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft Manifest number: 66 Signing time: Fri 17 Jul 2026 07:16:59 +0000 Manifest this update: Fri 17 Jul 2026 07:11:59 +0000 Manifest next update: Sat 18 Jul 2026 09:48:59 +0000 Files and hashes: 1: 8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl (hash: jtRL7+NIdwDEh6+9ECfKe0uwv9zJ6UskUfJ3UpbEbHY=) 2: 3130332e3137352e33382e302f32332d3234203d3e20313534343130.roa (hash: OeG/PNeipoOhOvGu8q4WBcsQGgNJ6UhKACe8udTmev0=) 3: 3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa (hash: Lndmx8VAy2DFBCTOeRbYATrs2gBsgQhEdnrs3xfeT3Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 09:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ed:ba:99:3a:9e:09:af:49:ac:cb:7c:c8:58:17:84:24:f2:47:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F049B43DD61285C6CDC819387CAD0651B0CF38B Validity Not Before: Jul 17 07:11:59 2026 GMT Not After : Jul 18 09:48:59 2026 GMT Subject: CN=007ABB8ED9411143E11950009D86682EDD5A8F48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:68:ce:c1:93:aa:39:0a:68:fb:c6:53:49: 29:89:b8:99:e3:22:c4:87:d5:10:40:7e:e6:79:09: 52:8d:8f:ce:9c:89:d4:5c:23:f6:e3:ed:f1:91:3c: d9:5c:6a:19:fa:fa:3a:3e:b7:29:d5:45:05:c9:51: 42:90:eb:1a:92:65:12:ca:a0:39:f8:6c:bb:47:99: d0:9b:1a:e6:4b:bc:0f:ef:21:d3:57:70:22:a5:fb: 95:6d:8c:c9:ff:47:17:05:9a:4d:45:d3:02:6b:48: f9:61:42:e6:52:c3:be:63:3c:08:f7:48:a6:cc:3d: a4:a4:9d:33:21:e2:23:13:77:7a:04:5e:ab:7a:ef: 55:f1:11:c4:40:5d:50:ac:be:99:28:0a:69:fa:73: 33:3c:5a:06:98:f7:28:17:4f:28:01:89:9a:ed:52: 7a:de:f2:35:60:b8:3f:3d:46:42:c5:4e:d7:91:df: 3a:44:e0:48:93:64:42:1c:47:d3:eb:1d:28:a4:f9: d1:0d:2e:2b:2c:4d:2a:68:9c:1b:a0:15:16:c3:57: fa:20:50:7b:9e:96:1a:8b:68:22:40:e5:c7:b9:ff: 57:7c:39:b1:9b:67:1f:9d:56:1a:c1:1f:e4:ef:73: 30:d1:02:1b:cb:b8:9b:ea:87:55:ce:47:88:e7:92: 37:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7A:BB:8E:D9:41:11:43:E1:19:50:00:9D:86:68:2E:DD:5A:8F:48 X509v3 Authority Key Identifier: keyid:8F:04:9B:43:DD:61:28:5C:6C:DC:81:93:87:CA:D0:65:1B:0C:F3:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ac:e6:73:9e:6a:2d:bb:55:da:4f:8c:ac:a9:52:2e:d5:27: fd:34:6c:6f:5c:d0:ef:f5:cd:fd:f8:45:11:aa:f7:7f:c7:38: 89:87:c3:1c:56:00:a7:a8:cf:ca:27:e9:b9:cf:6b:07:fd:2a: 13:b9:36:77:8a:6e:26:31:8d:db:58:2c:81:81:a2:46:1b:68: 01:63:ab:62:31:da:08:83:af:21:26:54:4d:fb:0b:3d:d3:ef: 52:a6:fc:72:eb:4b:c4:8e:8d:97:36:81:57:eb:3f:cb:a4:a7: e2:5d:71:9a:a7:75:2a:58:87:e8:f0:3d:53:3d:94:91:ab:5e: da:e7:5e:e2:97:d7:2e:68:f0:3a:ff:9d:21:8f:49:0b:50:9c: d9:9d:da:a5:93:d6:09:48:e4:7a:e6:1a:31:ee:3f:b5:ad:84: 24:ef:90:1f:40:d7:51:e2:17:ce:63:01:23:db:a2:26:68:4c: b2:b7:92:db:c0:4a:8a:ba:2c:8b:5d:f7:34:96:18:fe:63:0c: d4:29:f3:93:20:89:de:b4:75:34:ad:15:5c:24:5c:6b:36:d9: a3:24:f5:24:7e:ae:3f:80:b0:2a:f7:83:61:40:17:16:ef:0e: 56:19:c0:83:b0:4e:00:9d:9a:d5:6f:f2:52:c0:ad:bf:d1:f9: f9:39:bb:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXO26mTqeCa9JrMt8yFgXhCTyR7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYwNDlCNDNERDYxMjg1QzZDREM4MTkzODdDQUQwNjUx QjBDRjM4QjAeFw0yNjA3MTcwNzExNTlaFw0yNjA3MTgwOTQ4NTlaMDMxMTAvBgNV BAMTKDAwN0FCQjhFRDk0MTExNDNFMTE5NTAwMDlEODY2ODJFREQ1QThGNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC982jOwZOqOQpo+8ZTSSmJuJnj IsSH1RBAfuZ5CVKNj86cidRcI/bj7fGRPNlcahn6+jo+tynVRQXJUUKQ6xqSZRLK oDn4bLtHmdCbGuZLvA/vIdNXcCKl+5VtjMn/RxcFmk1F0wJrSPlhQuZSw75jPAj3 SKbMPaSknTMh4iMTd3oEXqt671XxEcRAXVCsvpkoCmn6czM8WgaY9ygXTygBiZrt Unre8jVguD89RkLFTteR3zpE4EiTZEIcR9PrHSik+dENLissTSponBugFRbDV/og UHuelhqLaCJA5ce5/1d8ObGbZx+dVhrBH+TvczDRAhvLuJvqh1XOR4jnkjehAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAHq7jtlBEUPhGVAAnYZoLt1aj0gwHwYDVR0j BBgwFoAUjwSbQ91hKFxs3IGTh8rQZRsM84swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJiMjkzNzgtNDVmMC00OWQzLWE2YWYtNTczYmU3ZGNhNmQwLzAvOEYwNDlCNDNE RDYxMjg1QzZDREM4MTkzODdDQUQwNjUxQjBDRjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjA0OUI0M0RENjEyODVDNkNEQzgxOTM4N0NBRDA2NTFCMENG MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGJiMjkzNzgtNDVmMC00OWQzLWE2 YWYtNTczYmU3ZGNhNmQwLzAvOEYwNDlCNDNERDYxMjg1QzZDREM4MTkzODdDQUQw NjUxQjBDRjM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADis5nOeai27VdpPjKypUi7VJ/00bG9c0O/1 zf34RRGq93/HOImHwxxWAKeoz8on6bnPawf9KhO5NneKbiYxjdtYLIGBokYbaAFj q2Ix2giDryEmVE37Cz3T71Km/HLrS8SOjZc2gVfrP8ukp+JdcZqndSpYh+jwPVM9 lJGrXtrnXuKX1y5o8Dr/nSGPSQtQnNmd2qWT1glI5HrmGjHuP7WthCTvkB9A11Hi F85jASPboiZoTLK3ktvASoq6LItd9zSWGP5jDNQp85Mgid60dTStFVwkXGs22aMk 9SR+rj+AsCr3g2FAFxbvDlYZwIOwTgCdmtVv8lLArb/R+fk5u9o= -----END CERTIFICATE-----Generated at Sat Jul 18 02:23:20 2026 by rpki-client